Job description_A day in this role_ <ul style="margin-top:0.0in;margin-bottom:0.0in"> <li style="margin:0.0in 0.0in 0.0in 0.0px;line-height:normal;font-size:12.0pt;font-family:'GFT Corporate Light'">Serve as the security architect for AWS-hosted public applications, setting standards for edge security, identity, segmentation, observability, and resilient application design.</li> <li style="margin:0.0in 0.0in 0.0in 0.0px;line-height:normal;font-size:12.0pt;font-family:'GFT Corporate Light'">Influence enterprise cloud strategy by balancing security, scalability, developer experience, and operational efficiency across public-facing application environments.</li> <li style="margin:0.0in 0.0in 0.0in 0.0px;line-height:normal;font-size:12.0pt;font-family:'GFT Corporate Light'">Collaborate with cloud architects and DevOps teams to identify and remediate cloud misconfigurations, enforce security policies, and maintain secure cloud infrastructure for hosting web applications.</li> <li style="margin:0.0in 0.0in 0.0in 0.0px;line-height:normal;font-size:12.0pt;font-family:'GFT Corporate Light'">Develop strategies to implement Web Application Firewalls (WAF), Cloud Native Application Protection Platforms (CNAPP) and Cloud Security Posture Management (CSPM) tools and integrate into the organization's security framework.</li> <li style="margin:0.0in 0.0in 0.0in 0.0px;line-height:normal;font-size:12.0pt;font-family:'GFT Corporate Light'">Evaluate emerging AWS services and security capabilities, translating them into practical design patterns and governance controls for internet-exposed platforms.</li> <li style="margin:0.0in 0.0in 0.0in 0.0px;line-height:normal;font-size:12.0pt;font-family:'GFT Corporate Light'">Establish application development security guidelines and best practices utilizing industry-standard security frameworks. Define, document and enforce clear guidelines for secure coding, vulnerability management, incident response, and application security.</li> <li style="margin:0.0in 0.0in 0.0in 0.0px;line-height:normal;font-size:12.0pt;font-family:'GFT Corporate Light'">Act as the Subject Matter Expert (SME) in application security during enterprise project development phases, providing security consulting, recommendations, and ensuring adherence to approved security requirements.</li> <li style="margin:0.0in 0.0in 0.0in 0.0px;line-height:normal;font-size:12.0pt;font-family:'GFT Corporate Light'">Collaborate with developers and software teams to embed security at every stage of the SDLC.</li> <li style="margin:0.0in 0.0in 0.0in 0.0px;line-height:normal;font-size:12.0pt;font-family:'GFT Corporate Light'">Identify, prioritize, and devise mitigation strategies for application security vulnerabilities, implementing preventative measures to avoid future incidents.</li> <li style="margin:0.0in 0.0in 0.0in 0.0px;line-height:normal;font-size:12.0pt;font-family:'GFT Corporate Light'">Integrate security tools, processes, and automation into the DevOps pipeline to enhance efficiency and scalability (DevSecOps).</li> <li style="margin:0.0in 0.0in 0.0in 0.0px;line-height:normal;font-size:12.0pt;font-family:'GFT Corporate Light'">Develop robust security requirements for authentication and authorization, including credential storage, privilege management, and adherence to role- and attribute-based access control standards.</li> <li style="margin:0.0in 0.0in 0.0in 0.0px;line-height:normal;font-size:12.0pt;font-family:'GFT Corporate Light'">Regularly monitor the security community for public-facing vulnerabilities, emerging threats, and new tactics to secure data transmissions and reduce attack exposure.</li> <li style="margin:0.0in 0.0in 0.0in 0.0px;line-height:normal;font-size:12.0pt;font-family:'GFT Corporate Light'">Stay updated on the latest security trends, tools, and technologies.</li> <li style="margin:0.0in 0.0in 0.0in 0.0px;line-height:normal;font-size:12.0pt;font-family:'GFT Corporate Light'">Attend and actively participate in application projects, change management meetings, and cross-functional discussions to ensure security is integrated from the outset.</li> <li style="margin:0.0in 0.0in 0.0in 0.0px;line-height:normal;font-size:12.0pt;font-family:'GFT Corporate Light'">Align with architects and development teams to promote secure design and data integrity preservation across users, applications, and infrastructure.</li> <li style="margin:0.0in 0.0in 0.0in 0.0px;line-height:normal;font-size:12.0pt;font-family:'GFT Corporate Light'">Foster the growth of application security champions within development teams to build a culture of security awareness and accountability.</li> <li style="margin:0.0in 0.0in 0.0in 0.0px;line-height:normal;font-size:12.0pt;font-family:'GFT Corporate Light'">Lead and participate in security team meetings to facilitate secure design and development practices.</li> <li style="margin:0.0in 0.0in 0.0in 0.0px;line-height:normal;font-size:12.0pt;font-family:'GFT Corporate Light'">Develop strong relationships with stakeholders to ensure ongoing commitment to security initiatives.</li> <li style="margin:0.0in 0.0in 0.0in 0.0px;line-height:normal;font-size:12.0pt;font-family:'GFT Corporate Light'">Actively engage in information security projects to evaluate existing security infrastructure and proposed changes, as defined by security leadership and software architects. </li> </ul> The expertise requested_ <ul style="margin-top:0.0in;margin-bottom:0.0in"> <li style="margin:0.0in 0.0in 0.0in 0.0px;line-height:normal;font-size:12.0pt;font-family:'GFT Corporate Light'">3+ years of work experience in cybersecurity, especially in a web application security engineer or security architect role</li> <li style="margin:0.0in 0.0in 0.0in 0.0px;line-height:normal;font-size:12.0pt;font-family:'GFT Corporate Light'">3+ years of work experience securing deployment and configuration of web applications in an AWS environment</li> <li style="margin:0.0in 0.0in 0.0in 0.0px;line-height:normal;font-size:12.0pt;font-family:'GFT Corporate Light'">3+ years’ experience in performing penetration testing, secure code review, static, dynamic and manual source code review</li> <li style="margin:0.0in 0.0in 0.0in 0.0px;line-height:normal;font-size:12.0pt;font-family:'GFT Corporate Light'">3+ years’ experience in identifying and remediating common web application vulnerabilities such as OWASP</li> <li style="margin:0.0in 0.0in 0.0in 0.0px;line-height:normal;font-size:12.0pt;font-family:'GFT Corporate Light'">3+ years hands-on experience with Web Application Scanning Tools</li> <li style="margin:0.0in 0.0in 0.0in 0.0px;line-height:normal;font-size:12.0pt;font-family:'GFT Corporate Light'">Proficient in software development (Java, Python, C#, etc.)</li> <li style="margin:0.0in 0.0in 0.0in 0.0px;line-height:normal;font-size:12.0pt;font-family:'GFT Corporate Light'">Experience with web development technologies and frameworks (REST, JSON, XML, JavaScript, React, etc.)</li> <li style="margin:0.0in 0.0in 0.0in 0.0px;line-height:normal;font-size:12.0pt;font-family:'GFT Corporate Light'">Experience with securing intra-company and third-party APIs.</li> <li style="margin:0.0in 0.0in 0.0in 0.0px;line-height:normal;font-size:12.0pt;font-family:'GFT Corporate Light'">DevOps background in public and private clouds.</li> <li style="margin:0.0in 0.0in 0.0in 0.0px;line-height:normal;font-size:12.0pt;font-family:'GFT Corporate Light'">Experience in implementing Web Application Firewalls (WAF)</li> <li style="margin:0.0in 0.0in 0.0in 0.0px;line-height:normal;font-size:12.0pt;font-family:'GFT Corporate Light'">Experience with CNAPP and CSPM tools</li> <li style="margin:0.0in 0.0in 0.0in 0.0px;line-height:normal;font-size:12.0pt;font-family:'GFT Corporate Light'">Solid understanding of network and web protocols.</li> <li style="margin:0.0in 0.0in 0.0in 0.0px;line-height:normal;font-size:12.0pt;font-family:'GFT Corporate Light'">Experience with technical documentation</li> <li style="margin:0.0in 0.0in 0.0in 0.0px;line-height:normal;font-size:12.0pt;font-family:'GFT Corporate Light'">Proven excellence in communicating business risk from cybersecurity topics.</li> <li style="margin:0.0in 0.0in 0.0in 0.0px;line-height:normal;font-size:12.0pt;font-family:'GFT Corporate Light'">Excellent communication and collaboration skills to work effectively with cross-functional teams.</li> <li style="margin:0.0in 0.0in 0.0in 0.0px;line-height:normal;font-size:12.0pt;font-family:'GFT Corporate Light'">Bachelor’s degree, preferably in a technical, scientific, or analytical discipline.</li> <li style="margin:0.0in 0.0in 0.0in 0.0px;line-height:normal;font-size:12.0pt;font-family:'GFT Corporate Light'">Candidates must be eligible to work in the US without sponsorship. </li> </ul> Desired or nice to have expertise_ <ul style="margin-top:0.0in;margin-bottom:0.0in"> <li style="margin:0.0in 0.0in 0.0in 0.0px;text-align:justify;line-height:normal;font-size:12.0pt;font-family:'GFT Corporate Light'">At least 5+ years’ experience in cybersecurity preferred, including compliance and risk management with system and application security engineering.</li> <li style="margin:0.0in 0.0in 0.0in 0.0px;text-align:justify;line-height:normal;font-size:12.0pt;font-family:'GFT Corporate Light'">Experience with one or more of the following: ISO 27001, NIST, SOX, GDPR, CIS or SOC2.</li> <li style="margin:0.0in 0.0in 0.0in 0.0px;text-align:justify;line-height:normal;font-size:12.0pt;font-family:'GFT Corporate Light'">Cybersecurity training and certification: SANS certifications (GWEB, GSEC), CISSP, CCSP and/or CSSLP, OSCP (and related).</li> <li style="margin:0.0in 0.0in 0.0in 0.0px;text-align:justify;line-height:normal;font-size:12.0pt;font-family:'GFT Corporate Light'">2+ years’ experience with SQL, KQL or Splunk</li> </ul> Our Core values are focus to inclusion and diversity, all qualified applicants will be considered for employment and will go thru a fair recruitment process regardless of their race, religion, gender identity, sexual orientation, national origin or disability status.Your journey with us begins here!!

AWS Expert Architect (Heredia, CR, 40101) @ GFT Technologies SE - Job Offerings

About this role

Ready to apply?